This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-123657 | BDVDB-2026-404809 Detail

ProfilePress

Description#

The ProfilePress WordPress plugin before 4.17.6 does not reject negative membership plan identifiers before checking whether a plan is active, allowing unauthenticated visitors to sign up for membership plans an administrator has deactivated and receive the role attached to them.

Impact#

No impact statement in the source data.

Weaknesses#

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.